Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP

2.2.0alpha3

Evert Pot evert released this · 11 commits to master since this release

Downloads

2.1.3

Evert Pot evert released this · 137 commits to master since this release

  • #586: SCHEDULE-STATUS should not contain a reason-phrase.
  • #539: Fixed a bug related to scheduling in shared calendars.
  • #595: Support for calendar-timezone in iCalendar exports.
  • #611: Escaping a bit more HTML output in the browser plugin. (@LukasReschke)
  • #610: Don't allow discovery of arbitrary files using .. in the browser plugin (@LukasReschke).
  • Browser plugin now shows quota properties.
  • #612: PropertyStorage didn't delete properties from nodes when a node's parents get deleted.
  • #581: Fixed problems related to finding attendee information during scheduling.
  • The zip release ships with sabre/vobject 3.4.2, sabre/http 3.0.4, and sabre/event 2.0.1.

Downloads

1.8.12

Evert Pot evert released this · 1096 commits to master since this release

  • The zip release ships with sabre/vobject 2.1.7.
  • #568: Support empty usernames and passwords in basic auth.

Downloads

2.2.0-alpha2

Evert Pot evert released this · 76 commits to master since this release

Downloads

2.1.2

Evert Pot evert released this · 181 commits to master since this release

  • #566: Another issue related to the migration script, which would cause scheduling to not work well for events that were already added before the migration.
  • #567: Doing freebusy requests on accounts that had 0 calendars would throw a E_NOTICE.
  • #579: Browser plugin can throw exception for a few resourcetypes that didn't have an icon defined.
  • The zip release ships with sabre/vobject 3.3.4, sabre/http 3.0.4, and sabre/event 2.0.1.

Downloads

2.0.6

Evert Pot evert released this · 510 commits to master since this release

  • Added Sabre\CalDAV\CalendarRoot as an alias for Sabre\CalDAV\CalendarRootNode. The latter is going to be deprecated in 2.1, so this makes it slightly easier to write code that works in both branches.
  • #497: Making sure we're initializing the sync-token field with a value after migration.
  • The zip release ships with sabre/vobject 3.3.4, sabre/http 2.0.4, and sabre/event 1.0.1.

Downloads

1.8.11

Evert Pot evert released this · 1109 commits to master since this release

  • The zip release ships with sabre/vobject 2.1.6.
  • Updated: MySQL database schema optimized by using more efficient column types.
  • #516: The DAV client will now only redirect to HTTP and HTTPS urls.

Downloads

2.2.0alpha1

Evert Pot evert released this · 125 commits to master since this release

  • The browser plugin now has a new page with information about your sabredav server, and shows information about every plugin that's loaded in the system.
  • #191: The Authentication system can now support multiple authentication backends.
  • Removed: all $tableName arguments from every PDO backend. This was already deprecated, but has now been fully removed. All of these have been replaced with public properties.
  • Deleted several classes that were already deprecated much earlier:
    • Sabre\CalDAV\CalendarRootNode
    • Sabre\CalDAV\UserCalendars
    • Sabre\DAV\Exception\FileNotFound
    • Sabre\DAV\Locks\Backend\FS
    • Sabre\DAV\PartialUpdate\IFile
    • Sabre\DAV\URLUtil
  • Removed: Sabre\DAV\Client::addTrustedCertificates and Sabre\DAV\Client::setVerifyPeer.
  • Removed: Sabre\DAV\Plugin::getPlugin() can now no longer return plugins based on its class name.
  • Removed: Sabre\DAVACL\Plugin::getPrincipalByEmail().
  • #560: GuessContentType plugin will now set content-type to application/octet-stream if a better content-type could not be determined.
  • #568: Added a componentType argument to ICSExportPlugin, allowing you to specifically fetch VEVENT, VTODO or VJOURNAL.
  • #582: Authentication backend interface changed to be stateless. If you implemented your own authentication backend, make sure you upgrade your class to the latest API!
  • #582: Sabre\DAV\Auth\Plugin::getCurrentUser() is now deprecated. Use Sabre\DAV\Auth\Plugin::getCurrentPrincipal() instead.

Downloads

2.1.1

Evert Pot evert released this · 193 commits to master since this release

Downloads

2.1.0

Evert Pot evert released this · 197 commits to master since this release

Brand new release! This release features caldav scheduling (rfc6638), vCard 4.0 (rfc6350) and jCard (rfc7095).

For the full list of changes since 2.0, check out the migration document.

  • #541: CalDAV PDO backend didn't respect overridden PDO table names.
  • #550: Scheduling invites are no longer delivered into shared calendars.
  • #554: calendar-multiget REPORT did not work on inbox items.
  • #555: The calendar-timezone property is now respected for floating times and all-day events in the calendar-query, calendar-multiget and free-busy-query REPORTs.
  • #555: The calendar-timezone property is also respected for scheduling free-busy requests.
  • #547: CalDAV system too aggressively 'corrects' incoming iCalendar data, and as a result doesn't return an etag for common cases.
  • The zip release ships with sabre/vobject 3.3.4, sabre/http 3.0.2, and sabre/event 2.0.1.

Downloads

2.1.0-alpha2

Evert Pot evert released this · 231 commits to master since this release

  • Added: calendar-user-address-set to default principal search properties list. This should fix iOS attendee autocomplete support.
  • Changed: Moved all 'notifications' functionality from Sabre\CalDAV\Plugin to a new plugin: Sabre\CalDAV\Notifications\Plugin. If you want to use notifications-related functionality, just add this plugin.
  • Changed: Accessing the caldav inbox, outbox or notification collection no longer triggers getCalendarsForUser() on backends.
  • #533: New invites are no longer delivered to taks-only calendars.
  • #538: Added calendarObjectChange event.
  • Scheduling speedups.
  • #539: added afterResponse event. (@joserobleda)
  • Deprecated: All the "tableName" constructor arguments for all the PDO backends are now deprecated. They still work, but will be removed in the next major sabredav version. Every argument that is now deprecated can now be accessed as a public property on the respective backends.
  • #529: Added getCalendarObjectByUID to PDO backend, speeding up scheduling operations on large calendars.

Downloads

2.0.5

Evert Pot evert released this · 521 commits to master since this release

Downloads

2.1.0-alpha1

Evert Pot evert released this · 268 commits to master since this release

  • Added: Support for rfc6638, also known as CalDAV Scheduling.
  • Added: Automatically converting between vCard 3, 4 and jCard using the Accept: header, in CardDAV reports, and automatically converting from jCard to vCard upon PUT. It's important to note that your backends may now recieve both vCard 3.0 and 4.0.
  • Added: #444. Collections can now opt-in to support high-speed MOVE.
  • Changed: PropertyStorage backends now have a move method.
  • Added: beforeMove, and afterMove events.
  • Changed: A few database changes for the CalDAV PDO backend. Make sure you run bin/migrate21.php to upgrade your database schema.
  • Changed: CalDAV backends have a new method: getCalendarObjectByUID. This method MUST be implemented by all backends, but the AbstractBackend has a simple default implementation for this.
  • Changed: Sabre\CalDAV\UserCalendars has been renamed to Sabre\CalDAV\CalendarHome.
  • Changed: Sabre\CalDAV\CalendarRootNode has been renamed to Sabre\CalDAV\CalendarRoot.
  • Changed: The IMipHandler has been completely removed. With CalDAV scheduling support, it is no longer needed. It's functionality has been replaced by Sabre\CalDAV\Schedule\IMipPlugin, which can now send emails for clients other than iCal.
  • Removed: Sabre\DAV\ObjectTree and Sabre\DAV\Tree\FileSystem. All this functionality has been merged into Sabre\DAV\Tree.
  • Changed: PrincipalBackend now has a findByUri method.
  • Changed: PrincipalBackend::searchPrincipals has a new optional test argument.
  • Added: Support for the {http://calendarserver.org/ns/}email-address-set property.
  • #460: PropertyStorage must move properties during MOVE requests.
  • Changed: Restructured the zip distribution to be a little bit more lean and consistent.
  • #524: Full support for the test="anyof" attribute in principal-search REPORT.
  • #472: Always returning lock tokens in the lockdiscovery property.
  • Directory entries in the Browser plugin are sorted by type and name. (@aklomp)
  • #486: It's now possible to return additional properties when an 'allprop' PROPFIND request is being done. (@aklomp)
  • Changed: Now return HTTP errors when an addressbook-query REPORT is done on a uri that's not a vcard. This should help with debugging this common mistake.
  • Changed: PUT requests with a Content-Range header now emit a 400 status instead of 501, as per RFC7231.
  • Added: Browser plugin can now display the contents of the {DAV:}supported-privilege-set property.
  • Added: Now reporting CALDAV:max-resource-size, but we're not actively restricting it yet.
  • Changed: CalDAV plugin is now responsible for reporting CALDAV:supported-collation-set and CALDAV:supported-calendar-data properties.
  • Added: Now reporting CARDDAV:max-resource-size, but we're not actively restricting it yet.
  • Changed: CalDAV plugin is now responsible for reporting CALDAV:supported-collation-set and CALDAV:supported-calendar-data properties.
  • Added: Now reporting CARDDAV:max-resource-size, but we're not actively restricting it yet.
  • Added: Support for CARDDAV:supported-collation-set.
  • Changed: CardDAV plugin is now responsible for reporting CARDDAV:supported-address-data. This functionality has been removed from the CardDAV PDO backend.
  • When a REPORT is not supported, we now emit HTTP error 415, instead of 403.
  • #348: HEAD requests now work wherever GET also works.
  • Changed: Lower priority for the iMip plugins schedule event listener.
  • Added: #523 Custom CalDAV backends can now mark any calendar as read-only.
  • The zip release ships with sabre/vobject 3.3.3, sabre/http 3.0.0, and sabre/event 2.0.0.

Downloads

2.0.4

Evert Pot evert released this · 533 commits to master since this release

  • #483: typo in calendars creation for PostgreSQL.
  • #487: Locks are now automatically removed after a node has been deleted.
  • #496: Improve CalDAV and CardDAV sync when there is no webdav-sync support.
  • Added: Automatically mapping internal sync-tokens to getctag.
  • The zip release ships with sabre/vobject 3.3.1, sabre/http 2.0.4, and sabre/event 1.0.1.

Downloads

1.7.13

Evert Pot evert released this · 1323 commits to master since this release

  • The zip release ships with sabre/vobject 2.1.4.
  • Changed: Removed phing and went with a custom build script for now.

EOL

Note that this is the final release for sabre/dav 1.7. Users are highly encouraged to upgrade to 1.8 or 2.0. Read more here.

Downloads

2.0.3

Evert Pot evert released this · 562 commits to master since this release

  • #474: Fixed PropertyStorage pathFilter().
  • #476: CSP policy incorrect, causing stylesheets to not load in the browser plugin.
  • #475: Href properties in the browser plugin sometimes included a backslash.
  • #478: TooMuchMatches exception never worked. This was fixed, and we also took this opportunity to rename it to TooManyMatches.
  • The zip release ships with sabre/vobject 3.2.4, sabre/http 2.0.4, and sabre/event 1.0.1.

Downloads

2.0.2

Evert Pot evert released this · 575 commits to master since this release

  • #470: Fixed compatibility with PHP < 5.4.14.
  • #467: Fixed a problem in examples/calendarserver.php.
  • #466: All the postgresql sample files have been updated.
  • Fixed: An error would be thrown if a client did a propfind on a node the user didn't have access to.
  • Removed: Old and broken example code from the examples/ directory.
  • The zip release ships with sabre/vobject 3.2.3, sabre/http 2.0.3, and sabre/event 1.0.1.

Downloads

2.0.1

Evert Pot evert released this · 585 commits to master since this release

  • #459: PROPFIND requests on Files with no Depth header would return a fatal error.
  • #464: A PROPFIND allprops request should not return properties with status 404.

Downloads

2.0.0

Evert Pot evert released this · 597 commits to master since this release

2.0! Finally!

Read the full announcement on the blog.

Changes since 2.0.0beta1:

  • Fixed: #456: Issue in sqlite migration script.
  • Updated: MySQL database schema optimized by using more efficient column types.
  • Cleaned up browser design.

Downloads

2.0.0beta1

Evert Pot evert released this · 605 commits to master since this release

  • The zip release ships with sabre/vobject 3.2.2, sabre/http 2.0.3, and sabre/event 1.0.0.
  • BC Break: Property updating and fetching got refactored. Read the migration document for more information. This allows for creation of a generic property storage, and other property-related functionality that was not possible before.
  • BC Break: Removed propertyUpdate, beforeGetProperties and afterGetProperties events.
  • Fixed: #413: Memory optimizations for the CardDAV PDO backend.
  • Updated: Brand new browser plugin with more debugging features and a design that is slightly less painful.
  • Added: Support for the {DAV:}supported-method-set property server-wide.
  • Making it easier for implementors to override how the CardDAV addressbook home is located.
  • Fixed: Issue #422 Preconditions were not being set on PUT on non-existant files. Not really a chance for data-loss, but incorrect nevertheless.
  • Fixed: Issue #428: Etag check with If: fails if the target is a collection.
  • Fixed: Issues #430, #431, #433: Locks plugin didn't not properly release filesystem based locks.
  • Fixed: #443. Support for creating new calendar subscriptions for OS X 10.9.2 and up.
  • Removed: Sabre\DAV\Server::NODE_* constants.
  • Moved all precondition checking into a central place, instead of having to think about it on a per-method basis.
  • jCal transformation for calendar-query REPORT now works again.
  • Switched to PSR-4
  • Fixed: #175. Returning ETag header upon a failed If-Match or If-None-Match check.
  • Removed: lib/Sabre/autoload.php. Use vendor/autoload.php instead.
  • Removed: all the rfc documentation from the sabre/dav source. This made the package needlessly larger.
  • Updated: Issue #439. Lots of updates in PATCH support. The Sabre_DAV_PartialUpdate_IFile interface is now deprecated and will be removed in a future version.
  • Added: Sabre\DAV\Exception\LengthRequired.

Downloads

1.8.10

Evert Pot evert released this · 1129 commits to master since this release

  • The zip release ships with sabre/vobject 2.1.4.
  • Updated: Issue #439. Lots of updates in PATCH support. The Sabre_DAV_PartialUpdate_IFile interface is now deprecated and will be removed in a future version.
  • Fixed: Restoring old setting after changing libxml_disable_entity_loader.
  • Fixed: Issue #422: Preconditions were not being set on PUT on non-existant files. Not really a chance for data-loss, but incorrect nevertheless.
  • Fixed: Issue #427: Now checking preconditions on DELETE requests.
  • Fixed: Issue #428: Etag check with If: fails if the target is a collection.
  • Fixed: Issue #393: PATCH request with missing end-range was handled incorrectly.
  • Added: Sabre_DAV_Exception_LengthRequired to omit 411 errors.

Downloads

1.7.12

Evert Pot evert released this · 1327 commits to master since this release

  • The zip release ships with sabre/vobject 2.1.4.
  • Updated: Issue #439. Lots of updates in PATCH support. The Sabre_DAV_PartialUpdate_IFile interface is now deprecated and will be removed in a future version.
  • Fixed: Restoring old setting after changing libxml_disable_entity_loader.
  • Fixed: Issue #422: Preconditions were not being set on PUT on non-existant files. Not really a chance for data-loss, but incorrect nevertheless.
  • Fixed: Issue #427: Now checking preconditions on DELETE requests.
  • Fixed: Issue #428: Etag check with If: fails if the target is a collection.
  • Fixed: Issue #393: PATCH request with missing end-range was handled incorrectly.
  • Added: Sabre_DAV_Exception_LengthRequired to omit 411 errors.

Downloads

1.8.9

Evert Pot evert released this · 1170 commits to master since this release

This release fixes a security issue and an issue related to large files in SabreDAV.

XEE issue

Previous SabreDAV versions had a security issue, if running on the following PHP versions

  • PHP 5.3, older than 5.3.23
  • PHP 5.4, older than 5.4.13
  • PHP 5.5 is not affected by this.

You are strongly recommended to upgrade, as the security issue could expose local files or easily trigger a DOS attack.

More information here: http://websec.io/2012/08/27/Preventing-XEE-in-PHP.html

Large file support

It was also discovered that SabreDAV can often not serve files larger than 2GB, due to a bug in PHP's fpassthru method.

If you ran into this issue, update sabredav. We are now no longer using fpasshtru.

More information here: http://evertpot.com/fpassthru-broken/

Downloads

1.7.11

Evert Pot evert released this · 1348 commits to master since this release

This release fixes a security issue and an issue related to large files in SabreDAV.

XEE issue

Previous SabreDAV versions had a security issue, if running on the following PHP versions

  • PHP 5.3, older than 5.3.23
  • PHP 5.4, older than 5.4.13
  • PHP 5.5 is not affected by this.

You are strongly recommended to upgrade, as the security issue could expose local files or easily trigger a DOS attack.

More information here: http://websec.io/2012/08/27/Preventing-XEE-in-PHP.html

Large file support

It was also discovered that SabreDAV can often not serve files larger than 2GB, due to a bug in PHP's fpassthru method.

If you ran into this issue, update sabredav. We are now no longer using fpasshtru.

More information here: http://evertpot.com/fpassthru-broken/

Downloads

1.8.8

Evert Pot evert released this · 1179 commits to master since this release

  • The zip release ships with sabre/vobject 2.1.3.
  • includes changes from version 1.7.10.

1.7.10 changes

  • Fixed: Potential security vulnerability in the http client.
  • Fixed: Issue #374: Don't urlescape colon (:) when it's not required.

Downloads

1.7.10

Evert Pot evert released this · 1351 commits to master since this release

  • The zip release ships with sabre/vobject 2.1.3.
  • Fixed: Potential security vulnerability in the http client.
  • Fixed: Issue #374: Don't urlescape colon (:) when it's not required.

Downloads

1.9.0alpha2

Evert Pot evert released this · 800 commits to master since this release

  • The zip release ships with sabre/vobject 3.1.3, sabre/http 2.0.1, and sabre/event 1.0.0.
  • Added: Browser can now inspect any node, if ?sabreaction=browser is appended.
  • Fixed: Issue #178. Support for multiple items in the Timeout header.
  • Fixed: Issue #382. Stricter checking if calendar-query is allowed to run.
  • Added: Depth: Infinity support for PROPFIND request. Thanks Thomas Müller and Markus Goetz.

Downloads

1.9.0alpha1

Evert Pot evert released this · 866 commits to master since this release

  • The zip release ships with sabre/vobject 3.1.3, sabre/http 2.0.0alpha5, and sabre/event 1.0.0.
  • BC Break: The CardDAV and CalDAV BackendInterface each have a new method: getMultipleCards and getMultipleCalendarObjects. The Abstract and PDO backends have default implementations, but if you implement that interface directly, this method is now required.
  • BC Break: XML property classes now receive an extra argument in their unserialize method ($propertyMap). This allows for recursively parsing properties, if needed.
  • BC Break: Now using sabre/event for event emitting/subscription. For plugin authors this means Server::subscribeEvent is now Server::on, and Server::broadcastEvent is now Server::emit.
  • BC Break: Almost all core functionality moved into a CorePlugin.
  • BC Break: Most events triggered by the server got an overhaul.
  • Changed: Sabre\HTTP now moved into a dedicated sabre/http package.
  • Added: Support for WebDAV-sync (rfc6578).
  • Added: Support for caldav-subscriptions, which is an easy way for caldav clients to manage a list of subscriptions on the server.
  • Added: Support for emitting and receiving jCal instead of iCalendar for CalDAV.
  • Added: BasicCallback authenticaton backend, for creating simple authentication systems without having to define any classes.
  • Added: A $transactionType property on the server class. This can be used for logging and performance measuring purposes.
  • Fixed: If event handlers modify the request body from a PUT request, an ETag is no longer sent back.
  • Added: Sabre\DAV\IMultiGet to optimize requests that retrieve information about lists of resources.
  • Added: MultiGet support to default CalDAV and CardDAV backends, speeding up the multiget and sync reports quite a bit!
  • Added: ICSExportPlugin can now generate jCal, filter on time-ranges and expand recurrences.
  • Fixed: Read-only access to calendars still allows the sharee to modify basic calendar properties, such as the displayname and color.
  • Changed: The default supportedPrivilegeSet has changed. Most privileges are no longer marked as abstract.
  • Changed: More elegant ACL management for CalendarObject and Card nodes.
  • Added: Browser plugin now marks a carddav directory as type Directory, and a shared calendar as 'Shared'.
  • Added: When debugExceptions is turned on, all previous exceptions are also traversed.
  • Removed: Got rid of the Version classes for CalDAV, CardDAV, HTTP, and DAVACL. Now that there's no separate packages anymore, this makes a bit more sense.
  • Added: Generalized the multistatus response parser a bit more, for better re-use.
  • Added: Sabre\DAV\Client now has support for complex properties for PROPPATCH. (Issue #299).
  • Added: Sabre\DAV\Client has support for gzip and deflate encoding.
  • Added: Sabre\DAV\Client now has support for sending objects as streams.
  • Added: Deserializer for {DAV:}current-user-privilege-set.
  • Added: Addressbooks or backends can now specify custom acl rules when creating cards.
  • Added: The ability for plugins to validate custom tokens in If: headers.
  • Changed: Completely refactored the Lock plugin to deal with the new If: header system.
  • Added: Checking preconditions for MOVE, COPY, DELETE and PROPPATCH methods.
  • Added: has() method on DAV\Property\SupportedReportSet.
  • Added: If header now gets checked (with ETag) all the time. Before the dealing with the If-header was a responsibility of the Locking plugin.
  • Fixed: Outbox access for delegates.
  • Added: Issue 333: It's now possible to override the calendar-home in the CalDAV plugin.
  • Added: A negotiateContentType to HTTP\Request. A convenience method.
  • Fixed: Issue 349: Denying copying or moving a resource into it's own subtree.
  • Fixed: SabreDAV catches every exception again.
  • Added: Issue #358, adding a component=vevent parameter to the content-types for calendar objects, if the caldav backend provides this info.

Downloads

1.8.7

Evert Pot evert released this · 1190 commits to master since this release

  • the zip release ships with sabre/vobject 2.1.3.
  • includes changes from version 1.7.9.

Downloads

1.7.9

Evert Pot evert released this · 1357 commits to master since this release

  • The zip release ships with sabre/vobject 2.1.3.
  • Fixed: Issue #365. Incorrect output when principal urls have spaces in them.
  • Added: Issue #367: Automatically adding a UID to vcards that don't have them.

Downloads

1.8.6

Evert Pot evert released this · 1211 commits to master since this release

  • The zip release ships with sabre/vobject 2.1.0.
  • Includes changes from version 1.7.8.

Downloads

1.7.8

Evert Pot evert released this · 1369 commits to master since this release

  • The zip release ships with sabre/vobject 2.1.0.
  • Changed: Sabre\DAV\Client::verifyPeer is now a protected property (instead of private).
  • Fixed: Text was incorrectly escaped in the Href and HrefList properties, disallowing urls with ampersands (&) in them.
  • Added: deserializer for Sabre\DAVACL\Property\CurrentUserPrivilegeSet.
  • Fixed: Issue 335: Client only deserializes properties with status 200.
  • Fixed: Issue 341: Escaping xml in 423 Locked error responses.
  • Added: Issue 339: beforeGetPropertiesForPath event.

Downloads

1.6.10

Evert Pot evert released this · 1836 commits to master since this release

  • Fixed: Text was incorrectly escaped in the Href and HrefList properties, disallowing urls with ampersands (&) in them.
  • Fixed: Issue 341: Escaping xml in 423 Locked error responses.

Downloads

1.8.5

Evert Pot evert released this · 1266 commits to master since this release

  • The zip release ships with sabre/vobject 2.0.7.
  • Includes changes from version 1.7.7.

Downloads

1.7.7

Evert Pot evert released this · 1401 commits to master since this release

  • The zip release ships with sabre/vobject 2.0.7.
  • Fixed: Assets in the browser plugins were not being served on windows machines.

Downloads

1.6.9

Evert Pot evert released this · 1843 commits to master since this release

  • Fixed: Assets in the browser plugins were not being served on windows machines.

Downloads

1.8.4

Evert Pot evert released this · 1274 commits to master since this release

  • The zip release ships with sabre/vobject 2.0.7.
  • Includes changes from version 1.7.6.

Downloads

1.7.6

Evert Pot evert released this · 1407 commits to master since this release

  • The zip release ships with sabre/vobject 2.0.7.
  • Fixed: vcardurl in database schema can now hold 255 characters instead of 80 (which is often way to small).
  • Fixed: The browser plugin potentially allowed people to open any arbitrary file on windows servers (CVE-2013-1939).

Downloads

1.6.8

Evert Pot evert released this · 1846 commits to master since this release

  • Fixed: vcardurl in database schema can now hold 255 characters instead of 80 (which is often way to small).
  • Fixed: The browser plugin potentially allowed people to open any arbitrary file on windows servers. (CVE-2013-1939).

Downloads

1.8.3

Evert Pot evert released this · 1289 commits to master since this release

  • The zip release ships with sabre/vobject 2.0.6.
  • Includes changes from version 1.7.5.
  • Fixed: organizer email-address for shared calendars is now prefixed with mailto:, as it should.

Downloads

1.7.5

Evert Pot evert released this · 1417 commits to master since this release

  • The zip release ships with sabre/vobject 2.0.6.
  • Change: No longer advertising support for 4.0 vcards. iOS and OS X address book don't handle this well, and just advertising 3.0 support seems like the most logical course of action.
  • Added: ->setVerifyPeers to Sabre_DAV_Client (greatly resisting against it, don't use this..).

Downloads

1.6.7

Evert Pot evert released this · 1851 commits to master since this release

  • Change: No longer advertising support for 4.0 vcards. iOS and OS X address book don't handle this well, and just advertising 3.0 support seems like the most logical course of action.
  • Added: ->setVerifyPeers to Sabre_DAV_Client (greatly resisting against it, don't use this..).

Downloads

1.8.2

Evert Pot evert released this · 1323 commits to master since this release

  • The zip release ships with sabre/vobject 2.0.5.
  • Includes changes from version 1.7.4.

Downloads

1.7.4

Evert Pot evert released this · 1439 commits to master since this release

  • The zip release ships with sabre/vobject 2.0.5.
  • Changed: To be compatibile with MS Office 2011 for Mac, a workaround was removed that was added to support old versions of Windows XP (pre-SP3). Indeed! We needed a crazy workaround to work with one MS product in the past, and we can't keep that workaround to be compatible with another MS product.
  • Fixed: expand-properties REPORT had incorrect values for the href element.
  • Fixed: Range requests now work for non-seekable streams. (Thanks Alfred Klomp).
  • Fixed: Changed serialization of {DAV:}getlastmodified and {DAV:}supportedlock to improve compatiblity with MS Office 2011 for Mac.
  • Changed: reverted the automatic translation of 'DAV:' xml namespaces to 'urn:DAV' when parsing files. Issues were reported with libxml 2.6.32, on a relatively recent debian release, so we'll wait till 2015 to take this one out again.
  • Added: Sabre_DAV_Exception_ServiceUnavailable, for emitting 503's.

Downloads

1.6.6

Evert Pot evert released this · 1863 commits to master since this release

  • Fixed: Backported a fix for broken XML serialization in error responses. (Thanks @DeepDiver1975!)

Downloads

1.8.1

Evert Pot evert released this · 1364 commits to master since this release

  • The zip release ships with sabre/vobject 2.0.5.
  • Includes changes from version 1.7.3.
  • Fixed: Typo in 1.7 migration script caused it to fail.

Downloads

1.7.3

Evert Pot evert released this · 1464 commits to master since this release

  • The zip release ships with sabre/vobject 2.0.5.
  • Fixed: Removing double slashes from getPropertiesForPath.
  • Change: Marked a few more properties in the CardDAV as protected, instead of private.
  • Fixed: SharingPlugin now plays nicer with other plugins with similar functionality.
  • Fixed: Issue 174. Sending back HTTP/1.0 for requests with this version.

Downloads

1.8.0

Evert Pot evert released this · 1384 commits to master since this release

  • The zip release ships with sabre/vobject 2.0.5.
  • BC Break: Moved the entire codebase to PHP namespaces.
  • BC Break: Every backend package (CalDAV, CardDAV, Auth, Locks, Principals) now has consistent naming conventions. There's a BackendInterface, and an AbstractBackend class.
  • BC Break: Changed a bunch of constructor signatures in the CalDAV package, to reduce dependencies on the ACL package.
  • BC Break: Sabre_CalDAV_ISharedCalendar now also has a getShares method, so sharees can figure out who is also on a shared calendar.
  • Added: Sabre_DAVACL_IPrincipalCollection interface, to advertise support for principal-property-search on any node.
  • Added: Simple console script to fire up a fileserver in the current directory using PHP 5.4's built-in webserver.
  • Added: Sharee's can now also read out the list of invites for a shared calendar.
  • Added: The Proxy principal classes now both implement an interface, for greater flexiblity.

Downloads

1.7.2

Evert Pot evert released this · 1475 commits to master since this release

  • The zip release ships with sabre/vobject 2.0.5.
  • Added: ACL plugin advertises support for 'calendarserver-principal- property-search'.
  • Fixed: [#153] Allowing for relative http principals in iMip requests.
  • Added: Support for cs:first-name and cs:last-name properties in sharing invites.
  • Fixed: Made a bunch of properties protected, where they were private before.
  • Added: Some non-standard properties for sharing to improve compatibility.
  • Fixed: some bugfixes in postgres sql script.
  • Fixed: When requesting some properties using PROPFIND, they could show up as both '200 Ok' and '403 Forbidden'.
  • Fixed: calendar-proxy principals were not checked for deeper principal membership than 1 level.
  • Fixed: setGroupMemberSet argument now correctly receives relative principal urls, instead of the absolute ones.
  • Fixed: Server class will filter out any bonus properties if any extra were returned. This means the implementor of the IProperty class can be a bit lazier when implementing. Note: bug numbers after this line refer to Google Code tickets. We're using github now.

Downloads

1.7.1

Evert Pot evert released this · 1498 commits to master since this release

  • Fixed: include path problem in the migration script.

Downloads

Something went wrong with that request. Please try again.